DataEngine guide

Introduction

The DataEngine component within ADAudit Plus stores and retrieves log data efficiently. It enhances scalability by enabling faster search and retrieval of data.

The DataEngine stores its data under C:\Program Files (x86)\ManageEngine\ADAudit Plus\apps by default. The size of this folder will depend on the volume of logs collected and stored. For example, approximately 15MB of space will be necessary for every 100,000 log entries. So be sure to allocate the space required on the disk for storing log data.

The DataEngine runs as a separate service, i.e., ManageEngine ADAudit Plus - DataEngine XNode. This service uses port 29118 to communicate, and it needs to be kept running for the optimal functioning of ADAudit Plus.

You can change the port being used by modifying the value of the parameter xnode.connector.port in the below files. Make sure to use the same value in both the files listed below:

<Installation directory>\apps\dataengine-xnode\conf\dataengine-xnode.conf

<Installation directory>\conf\DataEngine\engines\xnode\dataengine-xnode.conf

Required permissions

The user or the service account that starts the ManageEngine ADAudit Plus service needs these privileges:

• Full control over the product installation folder.
• Privilege to start, install, and stop the ManageEngine ADAudit Plus - DataEngine XNode service.

Steps to provide full control privileges over the product installation folder:

• Log in to the machine where ADAudit Plus is installed with domain admin privileges.
• Navigate to the product installation folder (C:\Program Files (x86)\ManageEngine\ADAudit Plus). Right-click on it and select Properties > Security > Edit. Select the user account you want to provide full control access to and click Add. Check Allow under Full control access. Click Ok.

Steps to provide privileges required to start, install, and stop the DataEngine service

You can either add the user to the local administrator group or use Group Policy to provide the necessary privileges.

• To add the user to the local administrator group:
  • Log in to the machine where ADAudit Plus is installed.
  • Go to Start > Control Panel > Edit local users and groups > Groups. Double-click Administrators.
  • In the Administrators Properties window that opens, click Add.
  • Select the Entire Directory. Select the desired user and click Add.
  • Click OK.
• To provide the necessary privileges using Group Policy:
  • Log in with Domain Admin credentials to any of the domain controllers that has Active Directory Users and Computers.
  • Go to Start > Windows Administrative Tools > Active Directory Users and Computers.
  • Right-click the domain to which you want to add the organizational unit to. Click New > Organizational Unit.
  • In the New object - Organizational Unit window that opens, type in the desired OU name and move the computer where ADAudit Plus service is running into the OU.
  • Go to Start > Windows Administrative Tools > Group Policy Management.

    Note: The Group Policy Management Console (GPMC) will not be installed on all workstations and servers by default. You can follow the steps on this page to install the GPMC on the desired member servers and workstations.

  • Navigate to the recently created OU. Right-click the OU and select Create a GPO and Link it here. In the New GPO window, type in the desired name and click OK.
  • Select the newly created GPO, right-click it, and select Edit. In the Group Policy Management Editor, go to Computer Configuration > Policies > Windows Settings > Security Settings > System services. Right-click ManageEngine ADAudit Plus - DataEngine XNode and select Properties. In the new window, check the Define this policy setting box. Click Edit Security.
  • In the Security tab that opens, search and find the user account to which you want to provide the necessary privileges. Select the user account and give Full access to it.
  • Click OK
  • This Group Policy needs to be enforced throughout the domain. To do this, go to Start > Command Prompt. Type in gpupdate/force.

Troubleshooting

Error:

DataEngine has been down for last "x" mins(s). You may not be able to view recent file audit reports due to this.

Solution:

1. Open the DataEngine.log file in the ADAudit Plus log folder, i.e., <installation_dir>\logs.
2. Check if the errors listed below are in the DataEngine.log file:
   • Unable to install the ManageEngine ADAudit Plus - DataEngine XNode service - Access is denied.
   • Unable to start the ManageEngine ADAudit Plus - DataEngine XNode service - Access is denied.

   

   • If these appear in the file, DataEngine is unavailable due to insufficient privileges. To provide sufficient privileges required to start, install, and stop the DataEngine service, follow the steps listed here.
   • If these are not in the file, then contact our support team. They will assist you in debugging the issue with the DataEngine service.